HIPAA Compliance
Your health information security is our highest priority
Our Commitment to HIPAA Compliance
Atomic Doctor, LLC is committed to protecting your health information and maintaining the highest standards of privacy and security in accordance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996.
We understand that your Protected Health Information (PHI) is sensitive and confidential. Our platform is designed from the ground up with security and compliance as core principles, not afterthoughts.
Our Compliance Measures
End-to-End Encryption
All patient data is encrypted both in transit (using TLS 1.3) and at rest (using AES-256 encryption). This ensures that your health information is protected from unauthorized access at all times.
Secure Video Consultations
Our telehealth platform uses HIPAA-compliant video conferencing technology with end-to-end encrypted audio and video streams. No third parties can intercept or access your consultations.
Role-Based Access Controls
We implement strict role-based access controls (RBAC) to ensure that only authorized physicians can view your Protected Health Information. Every access attempt is authenticated and authorized.
Comprehensive Audit Logging
All access to patient records is logged with detailed audit trails including who accessed what information, when, and for what purpose. These logs are regularly reviewed for suspicious activity.
Regular Security Assessments
We conduct continuous security monitoring, regular vulnerability scanning, penetration testing, and annual third-party security audits to identify and address potential vulnerabilities.
Business Associate Agreements
All third-party service providers who may have access to PHI are required to sign Business Associate Agreements (BAAs) to ensure HIPAA compliance extends across our entire technology ecosystem.
Staff Training & Awareness
All Atomic Doctor, LLC employees and contractors undergo mandatory HIPAA training and sign confidentiality agreements. We maintain a culture of privacy awareness throughout our organization.
Data Backup & Disaster Recovery
We maintain secure, encrypted backups of all PHI with geographically distributed redundancy. Our disaster recovery plan ensures continuity of care even in the event of system failures.
Your Rights Under HIPAA
Right to Access
You have the right to request and receive copies of your health records at any time. We will provide your records within 30 days of your request.
Right to Amend
You may request corrections to your health information if you believe it is incorrect or incomplete. We will review and respond to amendment requests promptly.
Right to Accounting of Disclosures
You can request a list of disclosures of your health information for purposes other than treatment, payment, or healthcare operations for the past six years.
Right to Restrict
You may request limitations on how we use or disclose your PHI. While we are not required to agree to all restrictions, we will carefully consider all requests.
Right to Confidential Communication
You can request that we communicate with you in specific ways or at certain locations to maintain your privacy.
Right to Breach Notification
We will notify you immediately in the unlikely event of a breach affecting your health information, as required by law.
Right to File a Complaint
If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the Office for Civil Rights (OCR).
Questions or Concerns?
If you have questions about our HIPAA compliance practices or wish to exercise any of your rights, please contact our Privacy Officer:
1-800-ATOMIC-DR
Office for Civil Rights (OCR) Complaints: www.hhs.gov/ocr/complaints
Last Updated: January 6, 2026